2097 matches found
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
DEBIAN-CVE-2005-1260
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
CVE-2005-1260: Uncontrolled Resource Consumption
bzip2 allows remote attackers to cause a denial of service hard drive consumption via a crafted bzip2 file that causes an infinite loop a.k.a "decompression bomb"...
USN-127-1: bzip2 vulnerabilities
Imran Ghory discovered a race condition in the file permission restore code of bunzip2. While a user was decompressing a file, a local attacker with write permissions in the directory of that file could replace the target file with a hard link. This would cause bzip2 to restore the file permissio...
CVE-2004-1731
CVE-2004-1731 affects the Mantis bugtracker, specifically signup_page.php, where remote attackers could create multiple users and provide the same e-mail address to trigger mass e-mail behavior. The vulnerability enables sending e-mail bombs; exploitation details (methods, likelihood, and in-the-...
CVE-2004-1731: Undefined Security Weakness
signuppage.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address...
Gzip Memory Bomb Denial Of Service
This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB. Many applications will not implement a length limit check and will eat up all memory and eventually die. This can also be used to kill systems that download/parse content from a user-provided URL...
I2S-LAB-10-15-03.Shell32-Do.txt
I2S LAB Security Advisory http://www.I2S-LAB.com Date : 12 / 03 / 2003 Affected systems : Microsoft Windows 2000 SP4 and below Vendor : http://www.microsoft.com Issue : Attackers can turn a media directory, drive, mail, ... into a remote bomb crashing any application which would try to acces it...
xNewsletter 1.0 - Form Field Input Validation
xNewsletter 1.0 - Form Field Input Validation source: https://www.securityfocus.com/bid/4516/info xNewsletter is a script that allows web users to subscribe to a newsletter. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems...
tmpwatch: local DoS : fork()bomb as root
sent through bugzilla.redhat.com no reply from responsible person. here it goes. Local DoS in /usr/sbin/tmpwatch. root forkbombs himself. tmpwatch is a bad boy Summary Local people can stop things working, and force you to reboot. Longer summary Any user with write access to /tmp or /var/tmp ca...
CVE-1999-0103
CVE-1999-0103 is described in connected documents as a denial-of-service issue caused by UDP flood/packet storms when echo and related UDP services are used in tandem (UDP bomb). The Philips ICS advisory (ICSMA-18-233-01) links CVE-1999-0103 to Uncontrolled Resource Consumption in Philips Intelli...
CVE-1999-0103: Undefined Security Weakness
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm...